High severity7.9NVD Advisory· Published Aug 12, 2025· Updated Jun 17, 2026
CVE-2025-49707
CVE-2025-49707
Description
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
Affected products
23-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:dcadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:dcasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:dcedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:dcesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:dcesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:ecadsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:ecasv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:ecedsv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:ecesv5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:ecesv6-series_azure_vm_firmware:-:*:*:*:*:*:*:*
-+ 1 more
- (no CPE)range: -
- cpe:2.3:o:microsoft:nccadsh100v5-series_azure_vm_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49707nvdVendor Advisory
News mentions
0No linked articles in our index yet.